Repositories list

• param-miner

  Public
  Java

  •

  Other

  •169•1.3k•19•5•Updated Feb 3, 2025Feb 3, 2025

• turbo-intruder

  Public
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

  Kotlin

  •

  Apache License 2.0

  •222•1.5k•14•1•Updated Jan 31, 2025Jan 31, 2025

• javascript-encode-as

  Public
  Basic Burp Plugin to allow encoding strings to JavaScript encodings (Unicode/Hex).

  Python

  •

  MIT License

  •1•0•0•0•Updated Jan 31, 2025Jan 31, 2025

• license-title-cleaner

  Public
  Removing " - licensed to .*" from Burp window title

  Java

  •1•0•0•0•Updated Jan 31, 2025Jan 31, 2025

• collabfiltrator

  Public
  Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

  Java

  •

  GNU General Public License v3.0

  •55•6•0•0•Updated Jan 31, 2025Jan 31, 2025

• pesd-exporter

  Public
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams

  HTML

  •

  Apache License 2.0

  •8•5•0•0•Updated Jan 30, 2025Jan 30, 2025

• burp-extensions-montoya-api-examples

  Public
  Examples for using the Montoya API with Burp Suite

  Java

  •

  Other

  •14•125•2•0•Updated Jan 30, 2025Jan 30, 2025

• timestamp-injector

  Public
  Burp Suite Extension to inject timestamps into HTTP requests

  Java

  •

  Apache License 2.0

  •1•0•0•0•Updated Jan 30, 2025Jan 30, 2025

• bypass-bot-detection

  Public
  Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

  Java

  •

  Apache License 2.0

  •12•278•0•0•Updated Jan 29, 2025Jan 29, 2025

• trusted-domain-cors-scanner

  Public
  My own additional active scan checks.

  Kotlin

  •1•0•0•0•Updated Jan 29, 2025Jan 29, 2025

• aws-signer

  Public
  Burp Extension for AWS Signing

  Java

  •

  MIT License

  •38•6•0•0•Updated Jan 29, 2025Jan 29, 2025

• active-scan-plus-plus

  Public
  ActiveScan++ Burp Suite Plugin

  Java

  •

  Apache License 2.0

  •192•212•0•1•Updated Jan 28, 2025Jan 28, 2025

• jwt-editor

  Public
  A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

  Java

  •

  Apache License 2.0

  •13•23•0•0•Updated Jan 24, 2025Jan 24, 2025

• enterprise-reference-stack-for-aws

  Public
  Smarty

  •

  Apache License 2.0

  •7•11•0•0•Updated Jan 21, 2025Jan 21, 2025

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2•7•0•2•Updated Jan 20, 2025Jan 20, 2025

• customizer

  Public
  Because just a dark theme wasn't enough!

  Java

  •

  GNU Affero General Public License v3.0

  •47•2•0•0•Updated Jan 15, 2025Jan 15, 2025

• pycript

  Public
  Burp Suite extension for bypassing client-side encryption using custom logic for manual and automation testing.

  Python

  •

  MIT License

  •26•8•0•0•Updated Jan 15, 2025Jan 15, 2025

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•2•0•0•Updated Jan 9, 2025Jan 9, 2025

• enterprise-helm-charts

  Public
  Helm charts for BSEE Kubernetes installation.

  kubernetesenterpriseburp+ 1helm-chart

  Smarty

  •

  Apache License 2.0

  •5•4•2•2•Updated Jan 9, 2025Jan 9, 2025

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •34•225•1•2•Updated Jan 9, 2025Jan 9, 2025

• trusted-types-checker

  Public
  Python

  •1•0•0•0•Updated Jan 8, 2025Jan 8, 2025

• saml-raider

  Public
  SAML2 Burp Extension

  Java

  •

  MIT License

  •76•30•0•0•Updated Jan 6, 2025Jan 6, 2025

• http-request-smuggler

  Public
  Java

  •

  Other

  •103•968•7•2•Updated Jan 6, 2025Jan 6, 2025

• scoper

  Public
  This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.

  Java

  •

  GNU General Public License v3.0

  •13•0•0•0•Updated Jan 2, 2025Jan 2, 2025

• burp-variables

  Public
  Burp Suite extension that extends Burp to support storing and reusing variables in requests

  Java

  •

  MIT License

  •1•0•0•0•Updated Dec 29, 2024Dec 29, 2024

• go-ocsp-responder

  Public
  OCSP responder written in Go meant to be used with PortSwigger's CertSquirt solution

  Go

  •

  MIT License

  •11•2•0•0•Updated Dec 17, 2024Dec 17, 2024

• burp-extensions-montoya-api

  Public
  Burp Extensions Api

  Java

  •

  Other

  •7•154•11•0•Updated Dec 16, 2024Dec 16, 2024

• content-type-converter

  Public
  Central Repo for Burp extensions

  Java

  •54•22•0•0•Updated Dec 13, 2024Dec 13, 2024

• hackvertor

  Public
  Java

  •50•88•0•0•Updated Dec 13, 2024Dec 13, 2024

• batch-scan-report-generator

  Public
  Small Burp Suite Extension to generate multiple scan reports by host with just a few clicks. Works with Burp Suite Professional only.

  Java

  •

  MIT License

  •2•4•0•0•Updated Dec 12, 2024Dec 12, 2024